Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File:                     NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier:          O4faFT0UB2BOi9Zl7NfIdRSq8vBJD4ejEFWrr5o/o5o=
Subject key identifier:   E4:36:93:81:15:DD:58:57:2B:24:C4:53:07:FC:9B:B7:D6:B3:09:50
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer:       /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial:       01984B54AED563AE8747C41878C07CB21240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number:          1608
Signing time:             Sun 27 Jul 2025 10:01:37 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:37 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:37 +0000
Files and hashes:         1: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (hash: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=)
                          2: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (hash: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=)
                          3: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: 0fT6HoPfRnv947ix2khENjhipnwUlv15uz+DsEeSf6U=)
                          4: W8oJrry2382XyDpwYu9d1fRM57k.roa (hash: vgOtreWyL8SSvp1wiImWd0ZzLXQJtP4n+ctgbIbJd6I=)
                          5: ZPnSp5toQpthOZvn7vrTi1PIJ0A.roa (hash: 2xJoiopsp/aP4IfMiv71h2CCh2maxmce9cHqGdAd1jM=)
                          6: hDuQO-2O-6Lo8qgrhYqNM0G4P24.roa (hash: WUDxmKQLeVQHlfqkPeKYvZqVqvTuBp11Xfwh/S2zHnQ=)
                          7: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (hash: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:ae:d5:63:ae:87:47:c4:18:78:c0:7c:b2:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
        Validity
            Not Before: Jul 27 10:01:37 2025 GMT
            Not After : Jul 28 10:01:37 2025 GMT
        Subject: CN=e436938115dd58572b24c45307fc9bb7d6b30950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:f5:70:64:eb:df:4b:d1:69:7f:aa:9f:2a:
                    9d:88:24:a6:d9:21:cd:c4:22:47:96:ce:91:aa:ed:
                    a2:16:0c:53:e9:37:4e:81:4b:3d:14:94:06:c3:e3:
                    f9:00:ee:10:7a:89:7e:87:ba:c4:f0:dd:18:79:8c:
                    66:2a:59:a9:d4:db:e4:8a:8f:a5:a7:2f:b5:50:1f:
                    c2:2f:83:a5:87:3c:d0:6a:ed:2c:4e:a9:b1:83:14:
                    12:e8:32:7a:8c:c1:64:66:4e:06:0e:58:7c:0e:cb:
                    ea:e4:8e:ec:58:d3:57:1c:45:30:09:45:e6:da:a1:
                    54:2b:cf:1b:fe:88:f5:5f:4e:ef:6a:70:54:fb:54:
                    50:f6:27:35:62:4f:3e:fc:79:c5:e9:b1:4a:70:60:
                    bb:b7:3a:d5:39:37:f8:47:67:cb:ed:4c:54:d7:2d:
                    15:61:77:f3:03:d0:57:da:78:6d:24:03:e5:a9:ba:
                    7d:dc:5d:98:7c:bb:4d:e8:e7:a7:03:ee:15:6d:c1:
                    e3:42:74:56:f5:53:57:af:5e:4c:18:64:e6:22:c2:
                    a8:ea:05:de:d2:5f:bc:e6:37:f1:87:9d:c0:c7:75:
                    a5:1d:98:45:74:48:95:d2:de:49:15:a4:3f:2a:d1:
                    12:ed:85:39:ad:6f:55:7d:1c:49:65:e3:f1:67:f7:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:36:93:81:15:DD:58:57:2B:24:C4:53:07:FC:9B:B7:D6:B3:09:50
            X509v3 Authority Key Identifier:
                keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:a4:08:9d:9a:37:30:ac:e0:40:a7:d9:77:85:49:65:5d:
         75:e5:b2:0e:d2:11:20:62:59:91:c5:d1:a4:d8:e7:ee:d4:f0:
         10:c4:29:5d:31:66:75:40:3a:78:57:34:ce:1f:15:33:33:e2:
         39:95:2a:3c:6b:61:3d:cd:8f:ff:36:54:9b:55:f1:37:f8:12:
         8a:19:f4:b1:39:9b:29:80:db:53:f1:c4:ca:95:6c:b6:13:95:
         e6:ee:d2:a2:4e:7c:a6:25:36:37:4f:c6:e2:5f:db:da:ab:c8:
         ab:41:44:19:39:80:3e:bb:77:14:ba:72:2a:7b:55:59:24:60:
         f0:0a:aa:0a:1a:ed:6f:66:48:ce:23:f6:03:31:bc:3d:bf:c0:
         40:f2:e7:a8:35:71:a8:6a:86:85:b8:1c:4e:9f:c3:b4:77:d7:
         d0:35:f6:d9:93:ee:10:10:a3:b4:11:64:de:2f:70:15:81:08:
         77:9a:6c:ea:88:05:c5:97:87:18:bb:2f:0f:8c:16:5c:51:b6:
         8f:f3:89:a8:dd:70:75:4c:e5:0d:9c:c6:17:6f:9b:04:ab:2f:
         37:15:ed:ac:7e:b0:f5:1e:c7:57:ff:c7:c8:52:ba:5d:c5:17:
         ee:3b:13:bf:18:55:d6:e4:27:f1:66:59:10:f5:e5:5a:a1:4d:
         bf:4e:42:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVK7VY66HR8QYeMB8shJAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi
NDNhMTgwHhcNMjUwNzI3MTAwMTM3WhcNMjUwNzI4MTAwMTM3WjAzMTEwLwYDVQQD
EyhlNDM2OTM4MTE1ZGQ1ODU3MmIyNGM0NTMwN2ZjOWJiN2Q2YjMwOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7L1cGTr30vRaX+qnyqdiCSm2SHN
xCJHls6Rqu2iFgxT6TdOgUs9FJQGw+P5AO4Qeol+h7rE8N0YeYxmKlmp1Nvkio+l
py+1UB/CL4OlhzzQau0sTqmxgxQS6DJ6jMFkZk4GDlh8Dsvq5I7sWNNXHEUwCUXm
2qFUK88b/oj1X07vanBU+1RQ9ic1Yk8+/HnF6bFKcGC7tzrVOTf4R2fL7UxU1y0V
YXfzA9BX2nhtJAPlqbp93F2YfLtN6OenA+4VbcHjQnRW9VNXr15MGGTmIsKo6gXe
0l+85jfxh53Ax3WlHZhFdEiV0t5JFaQ/KtES7YU5rW9VfRxJZePxZ/cV+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ2k4EV3VhXKyTEUwf8m7fWswlQMB8GA1UdIwQY
MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt
YWFiYjA2MmU0MGRiLzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi
LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxqkCJ2a
NzCs4ECn2XeFSWVddeWyDtIRIGJZkcXRpNjn7tTwEMQpXTFmdUA6eFc0zh8VMzPi
OZUqPGthPc2P/zZUm1XxN/gSihn0sTmbKYDbU/HEypVsthOV5u7Sok58piU2N0/G
4l/b2qvIq0FEGTmAPrt3FLpyKntVWSRg8AqqChrtb2ZIziP2AzG8Pb/AQPLnqDVx
qGqGhbgcTp/DtHfX0DX22ZPuEBCjtBFk3i9wFYEId5ps6ogFxZeHGLsvD4wWXFG2
j/OJqN1wdUzlDZzGF2+bBKsvNxXtrH6w9R7HV//HyFK6XcUX7jsTvxhV1uQn8WZZ
EPXlWqFNv05CAQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:52:10 2025 by rpki-client